Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa
File:                     a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa (raw, json)
Hash identifier:          2rjQz+dEsZXOycu/A7xR9Ti5GiG1dB+4Q10xnxkVnrw=
Subject key identifier:   90:8E:4D:C9:75:61:1F:C5:50:FE:E7:90:B8:62:78:54:3C:14:18:7F
Certificate issuer:       /CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
Certificate serial:       010D0C9F4328584DA829125EA110C84D07A58740
Authority key identifier: 47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa
Signing time:             Tue 28 Apr 2026 13:40:08 +0000
ROA not before:           Tue 28 Apr 2026 13:40:08 +0000
ROA not after:            Mon 27 Jul 2026 13:40:08 +0000
asID:                     14618
IP address blocks:        159.220.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:29:12:5e:a1:10:c8:4d:07:a5:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
        Validity
            Not Before: Apr 28 13:40:08 2026 GMT
            Not After : Jul 27 13:40:08 2026 GMT
        Subject: CN=ac4ce10d-6a75-42b9-b82f-1aeb3a72cf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:e3:29:42:05:37:2f:0f:cf:6f:a8:24:1f:
                    f6:99:95:a2:f1:76:35:d9:90:18:18:b9:9a:44:f9:
                    9f:49:04:20:84:fa:ed:79:83:83:aa:ca:61:ef:bf:
                    8e:56:b9:e3:a9:0b:62:82:22:13:b9:86:77:f5:ba:
                    28:20:96:42:73:7a:1d:dc:79:56:c6:99:bb:75:f4:
                    f1:7f:f7:a7:51:44:cb:9c:63:14:bd:aa:f6:4d:8e:
                    d0:d8:17:75:7b:0a:4b:e7:6b:02:0f:b7:89:84:b2:
                    0e:f4:cb:95:fc:e0:a2:ac:b2:71:55:ce:81:4c:41:
                    c5:71:7b:71:e0:28:9f:d7:73:b4:1f:88:e9:3e:76:
                    f2:43:d4:3c:10:24:c0:c6:2c:68:57:36:91:5e:fe:
                    e7:57:e1:77:f6:a8:cc:bc:1c:86:d8:14:54:fc:5c:
                    72:b5:58:a3:86:cc:d1:1c:b4:94:63:be:f4:54:73:
                    9f:69:1e:3a:da:b7:ba:6e:c7:2c:f3:fe:a5:fd:4c:
                    13:2d:c9:4f:b0:a2:4f:b1:49:e1:58:15:fb:80:56:
                    0e:e6:54:4f:52:5c:7e:00:db:b4:02:3b:4f:95:69:
                    c8:79:c3:26:56:a6:52:18:62:ee:71:93:87:5f:da:
                    27:ca:4e:b0:b2:9c:37:09:4b:f7:04:c2:ab:0c:05:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8E:4D:C9:75:61:1F:C5:50:FE:E7:90:B8:62:78:54:3C:14:18:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl

            X509v3 Authority Key Identifier:
                keyid:47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.220.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:c8:8f:8b:77:37:ee:cf:08:ed:80:ef:1d:8f:ec:3c:ad:
         96:fa:13:68:da:a0:08:6e:7b:97:6f:c9:64:25:68:e9:6f:cd:
         76:94:3a:e6:bb:ed:6e:3c:69:19:60:b5:bc:d8:6f:66:e2:48:
         e7:ce:e5:f8:96:c1:d4:52:d7:39:07:e1:33:66:91:cc:a9:d8:
         13:40:2d:79:b3:03:c1:32:19:a1:4e:8b:23:b9:5f:c5:5e:9f:
         81:00:48:3b:de:de:48:63:e4:66:fc:95:45:eb:d9:c1:34:ad:
         ac:b1:d2:03:68:df:32:44:f0:2f:e0:6c:1d:0a:94:c3:ef:4b:
         00:3c:f6:97:13:4d:0d:1c:ba:02:03:7b:c8:b2:66:e5:f8:61:
         c6:f3:cd:ce:6e:10:5f:f9:07:ca:0a:33:c1:0c:c8:bf:ca:6d:
         ef:e7:13:dc:d4:4e:be:a8:9f:fa:34:b2:e4:30:1e:a2:ff:5f:
         38:8a:be:a1:88:7e:81:38:c8:91:b9:9e:20:39:25:fc:74:dd:
         8e:bb:ef:22:52:37:32:18:02:78:ae:e0:93:08:f8:66:5b:4c:
         4c:e6:80:c2:cc:1e:17:9a:b0:d2:97:09:64:b5:f4:48:48:7e:
         7f:07:13:5d:6c:cf:4e:c2:7e:7c:2a:7c:e6:e4:20:8b:c0:a9:
         26:24:22:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oKRJeoRDITQelh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThhZGM4NjAtMTM4MS00Mjk5LWI1YmEtZGQzZTFmNjA1
YzQ2MB4XDTI2MDQyODEzNDAwOFoXDTI2MDcyNzEzNDAwOFowLzEtMCsGA1UEAxMk
YWM0Y2UxMGQtNmE3NS00MmI5LWI4MmYtMWFlYjNhNzJjZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq7jKUIFNy8Pz2+oJB/2mZWi8XY12ZAYGLma
RPmfSQQghPrteYODqsph77+OVrnjqQtigiITuYZ39booIJZCc3od3HlWxpm7dfTx
f/enUUTLnGMUvar2TY7Q2Bd1ewpL52sCD7eJhLIO9MuV/OCirLJxVc6BTEHFcXtx
4Cif13O0H4jpPnbyQ9Q8ECTAxixoVzaRXv7nV+F39qjMvByG2BRU/FxytVijhszR
HLSUY770VHOfaR462re6bscs8/6l/UwTLclPsKJPsUnhWBX7gFYO5lRPUlx+ANu0
AjtPlWnIecMmVqZSGGLucZOHX9onyk6wspw3CUv3BMKrDAUSgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCOTcl1YR/FUP7nkLhieFQ8FBh/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hOGFk
Yzg2MC0xMzgxLTQyOTktYjViYS1kZDNlMWY2MDVjNDYvYTBlMDA5YjYtY2RjYy0z
MTJiLTgyOTktYTIyOWIxZjQxZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYThhZGM4NjAtMTM4MS00Mjk5LWI1
YmEtZGQzZTFmNjA1YzQ2L2E4YWRjODYwLTEzODEtNDI5OS1iNWJhLWRkM2UxZjYw
NWM0Ni5jcmwwHwYDVR0jBBgwFoAURwcRr7esAnUsbWOPk1dxKGgbExAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hOGFkYzg2MC0xMzgxLTQyOTktYjViYS1kZDNl
MWY2MDVjNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn9w0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcLyI+LdzfuzwjtgO8dj+w8rZb6E2jaoAhue5dvyWQlaOlvzXaUOua7
7W48aRlgtbzYb2biSOfO5fiWwdRS1zkH4TNmkcyp2BNALXmzA8EyGaFOiyO5X8Ve
n4EASDve3khj5Gb8lUXr2cE0rayx0gNo3zJE8C/gbB0KlMPvSwA89pcTTQ0cugID
e8iyZuX4Ycbzzc5uEF/5B8oKM8EMyL/Kbe/nE9zUTr6on/o0suQwHqL/XziKvqGI
foE4yJG5niA5Jfx03Y677yJSNzIYAniu4JMI+GZbTEzmgMLMHheasNKXCWS19EhI
fn8HE11sz07CfnwqfObkIIvAqSYkIns=
-----END CERTIFICATE-----
Generated at Sun May 3 17:06:18 2026 by rpki-client